Secure medication transport and administration system

ABSTRACT

A portable medication dispensing system is described. In some embodiments, the system includes a portable medication tote comprising a securable compartment configured to hold medication, and a controller, responsive to access information, configured to assign a patient to the securable compartment such that medications for the patient are authorized for placement into the securable compartment. The controller is also configured to selectively permit a user access to the medications for the patient in the securable compartment when the access information indicates the user has access to the securable compartment, and restrict access to retrieval of the medications for the patient in the securable compartment when the access information indicates the user does not have access to the securable compartment. The system also includes an information output module configured to output usage information regarding access to the securable compartment.

STATEMENT AS TO RIGHTS TO INVENTIONS MADE UNDER FEDERALLY SPONSOREDRESEARCH OR DEVELOPMENT

Not Applicable.

FIELD

The present disclosure generally relates to apparatus and methods forproviding health care and, in particular, relates to providing care to apatient through controlled access to medication.

BACKGROUND

It is well known in the medical community, and in particular, inhospitals, to use a centralized inventory system for dispensing andadministering medications. In this system, medications provided by apharmacy, for example, are temporarily stored in a centralized area orstation for administration.

Caregivers who seek to administer to patients medications from thecentralized storage area often transport the medications in an unsecuredfashion, such as by loading the selected medications onto a movablecart, onto a tray, or even into their own pockets. Consequently, thereare provided by a pharmacy, for example, several risks associated withunsecured transport, such as the wrong type or amount of medicationbeing administered to a patient, the medication being stolen, or themixing of medications where the medications are temporarily stored foradministration.

Furthermore, little or no record is kept of the taking or dispensing ofsuch medications, such as the type and dose of the medication, when andby whom the medication was removed, and to whom and at what time themedication was administered. Healthcare facilities are thus ofteninhibited from determining if the type and amount of medication given toa patient was appropriate, or whether any medication was administered atall.

SUMMARY

Embodiments of the secure medication transport and administration system(hereinafter “secure tote”) disclosed herein provide for the recordedand secure loading of patient-specific medications into a secure,portable device which records and verifies patient bedside access to themedications by an authorized caregiver.

According to one embodiment of the present disclosure, a portablemedication dispensing system comprises a portable medication totecomprising at least one securable compartment configured to holdmedication, and a controller responsive to access information. Thecontroller is configured to assign a patient to the at least onesecurable compartment such that medications for the patient areauthorized for placement into the at least one securable compartment.The controller is further configured to selectively permit a user accessto the medications for the patient in the at least one securablecompartment when the access information indicates the user has access tothe at least one securable compartment, and restrict access to retrievalof the medications for the patient in the at least one securablecompartment when the access information indicates the user does not haveaccess to the at least one securable compartment. The system furthercomprises an information output module configured to output usageinformation regarding access to the at least one securable compartment.

According to one aspect of the present disclosure, a method forpatient-specific medication dispensing comprises assigning a patient toat least one securable compartment in a portable medication tote, the atleast one securable compartment configured to store medications for thepatient. The method further comprises selectively permitting a useraccess to store the medications for the patient in the at least onesecurable compartment when access information indicates the user hasstorage access to the at least one securable compartment, and comparinga bedside identification of the user and a bedside identification of thepatient to the access information to determine whether the user hasaccess to dispense to the patient the medications for the patient in theat least one securable compartment. The method also comprisesselectively permitting the user access to dispense to the patient themedications for the patient in the at least one securable compartmentusing the determination, and outputting usage information regarding theuser access to at least one of the assignment, access, and thedetermination made regarding the at least one securable compartment.

According to another embodiment of the present disclosure, acomputer-readable medium having computer-executable instructions forcausing a processor to execute instructions to control a portablemedication dispensing system by performing steps comprising assigning apatient to at least one securable compartment in a portable medicationtote, the at least one securable compartment configured to storemedications for the patient. The computer-readable medium furthercomprises computer-executable instructions for performing stepscomprising selectively permitting a user access to store the medicationsfor the patient in the at least one securable compartment when accessinformation indicates the user has storage access to the at least onesecurable compartment, and comparing a bedside identification of theuser and a bedside identification of the patient to the accessinformation to determine whether the user has access to dispense to thepatient the medications for the patient in the at least one securablecompartment. The computer-readable medium also comprisescomputer-executable instructions for performing steps comprisingselectively permitting the user access to dispense to the patient themedications for the patient in the at least one securable compartmentusing the determination, and outputting usage information regarding theuser access to the assignment, access, and/or determination maderegarding the at least one securable compartment.

According to a further embodiment of the present disclosure, a portabledispensing system comprises a portable item tote comprising at least onesecurable compartment configured to hold items, and a controllerresponsive to access information. The controller is configured to assignan assignee to the at least one securable compartment such that itemsfor the assignee are authorized for placement into the at least onesecurable compartment. The controller is further configured toselectively permit a user access to the items for the assignee in the atleast one securable compartment when the access information indicatesthe user has access to the at least one securable compartment, andrestrict access to retrieval of the items for the assignee in the atleast one securable compartment when the access information indicatesthe user does not have access to the at least one securable compartment.The system further comprises an information output module configured tooutput usage information regarding access to the at least one securablecompartment.

Additional features and advantages of the invention will be set forth inthe description below, and in part will be apparent from thedescription, or may be learned by practice of the invention. Theobjectives and other advantages of the invention will be realized andattained by the structure particularly pointed out in the writtendescription and claims hereof as well as the appended drawings.

It is to be understood that both the foregoing general description andthe following detailed description are exemplary and explanatory and areintended to provide further explanation of the discussed embodiments asclaimed.

BRIEF DESCRIPTION OF THE DRAWINGS

The accompanying drawings, which are included to provide furtherunderstanding and are incorporated in and constitute a part of thisspecification, illustrate disclosed embodiments and together with thedescription serve to explain the principles of the disclosedembodiments. In the drawings:

FIG. 1 illustrates one embodiment of a secure tote for secure medicationtransport and administration.

FIG. 2 is a block diagram of certain electronic features of the securetote of FIG. 1 and of an Automated Dispensing Machine (ADM).

FIG. 3 is a block diagram of a network configuration for the secure toteof FIG. 1.

FIG. 4 is a flow diagram illustrating an exemplary process for fillingmedications in the secure tote of FIG. 1.

FIG. 5 is a flow diagram illustrating an exemplary process fordispensing medications from the secure tote of FIG. 1.

FIG. 6 illustrates another embodiment of a secure tote for securemedication transport and administration.

FIG. 7 illustrates the secure tote embodiment of FIG. 6 with an openlid.

FIG. 8 illustrates a docking station for the secure tote embodiment ofFIG. 6.

FIG. 9 illustrates a sample screenshot of ADM interface softwaredisplaying a docked secure tote.

FIG. 10 illustrates a sample screenshot of ADM interface softwaredisplaying an assigning of patient-specific medications to a securetote.

DETAILED DESCRIPTION

In the following detailed description, numerous specific details are setforth to provide a full understanding of the present disclosure. It willbe obvious, however, to one ordinarily skilled in the art that theembodiments of the present disclosure may be practiced without some ofthese specific details. In other instances, well-known structures andtechniques have not been shown in detail not to obscure the disclosure.

Referring now to the drawings, FIG. 1 illustrates one embodiment of asecure tote 100 for secure medication transport and administration. Thisconfiguration is exemplary only, such that other physical configurationsmay be employed.

The secure tote 100 provides secure transport for patient-specificmedication from a medication storage device to a patient, where thepatient-specific medications can be dispensed by a user, such as acaregiver. Through positive, physical bedside identification of both acaregiver authorized to dispense the medications from the secure tote100 and a patient for whom those medications are intended, the securetote 100 helps ensure that the appropriate medication type and dose isprovided to the patient. The secure tote 100 is further configured tolog usage information, such as access information and locationinformation, either locally, such as in memory housed in the secure tote100, or remotely, by transmitting the usage information to a remoteinformation storage server. Furthermore, in certain embodiments, thesecure tote 100 is configured to dock with the medication storagedevice, such that the secure tote 100 can directly obtainpatient-specific medication information from the medication storagedevice when the patient-specific medication is transferred from themedication storage device to the secure tote 100.

In the embodiment illustrated in FIG. 1, the secure tote 100 comprises aplurality of securable, modular receptacles 110, a wireless barcodereader 130, a handle 120, and indicator lights 140. Each receptacle 110itself may be a medication package that contains drugs and a packageinsert.

The modular receptacles 110 are configured to be moveable between aclosed position and an open position, such as shown by open modularreceptacle 112. Each receptacle 110 has a plurality of sidewalls thatdefine a storage compartment as well as a top 116 that is opened andclosed about a hinge. A latch assembly can be formed between top 116 andone of the sidewalls to keep top 116 in a closed position until anauthorized caregiver gains access to the receptacle 110. Additionalstorage features, including features of exemplary modular receptacles110, are fully disclosed in U.S. Pat. Nos. 6,116,461 and 6,338,007,which are incorporated herein by reference in their entirety. Othertypes of modular receptacles may be employed, however.

Each modular receptacle 110 may be used to contain various items, forexample, medications 114. Each modular receptacle 110 may housemultiples of one type of drug or medical supply or it may house severalvarieties of drugs or medical supplies. Each modular receptacle 110 maybe refilled and reused many times. Each modular receptacle 110 may alsoinclude a label for identification of the contents within thereceptacle, and/or some or all of top 116 may be transparent.

Although a plurality of receptacles for medication storage areillustrated in the secure tote 100 of FIG. 1, in other embodiments,other forms of storage can be used. For example, the secure tote 100 canbe divided into equally accessible compartments by adjustable or fixeddividers all having a single shared, securable cover. In otherembodiments, the secure tote 100 can be custom configured to match themedication and supply needs of the facility using the secure tote 100.

The secure tote 100 can be made from plastic, such as injection moldedplastic, or formed from metal, and, as such, may be durable and reusablemultiple times. In other embodiments, other materials can be used.

Wireless barcode reader 130 is used as an input device for receivinginformation such as medication information, caregiver information, andpatient information. For example, wireless barcode reader 130 can beused by a caregiver to scan in patient-specific medication informationwhen the patient-specific medication is being loaded into a modularreceptacle 110, and later scan the caregiver's identification tag and apatient's identification tag at the patient's bedside in order toprovide the caregiver with access to the modular receptacle 110containing the patient's medication. By using an input device 130 suchas a barcode reader, the secure tote 100 provides for rapid input ofpatient identification and caregiver identification information, whichreduces the overall time it takes an authorized caregiver to gain accessto and dispense patient-specific medications from the secure tote 100.Although wireless barcode reader 130 is illustrated, other wired orwireless input devices can be used, such as, but not limited to, akeyboard, a touch-screen display, a mouse, a microphone, a magnetic cardreader, a biometric reader-sensor, a proximity reader, a radio frequency(RF) identification reader, and a symbology reader.

Output devices, such as indicator lights 140, on the exterior of thesecure tote 100 are used to indicate a status of the secure tote 100. Incertain embodiments, indicator lights 140 are red and green in order toprovide indications for different states. For example, red indicatorlight 140 can be turned on if the secure tote 100 denies access to amodular receptacle 110, if the input device 110 cannot read data, ifpower associated with the secure tote 100 is low, or if the secure tote100 loses communication with a network. Similarly, green indicator light140 can be turned on if the secure tote 100 grants access to a modularreceptacle 110, if the input device 110 successfully reads data, if thesecure tote 100 is powered on, or if the secure tote 100 iscommunicating with a network.

In other embodiments, other types of output devices can be used. Forexample, the secure tote 100 can include audible indicators such asspeakers, or other visual indicators such as display screens, includinga cathode ray tube (CRT) display, vacuum fluorescent display (VFD),light emitting diode (LED) display, plasma display panel (PDP), liquidcrystal display (LCD), organic light emitting diode (OLED), orsurface-conduction electron-emitter display (SED).

The secure tote 100 of FIG. 1 further includes a handle 120 for ease oftransport. In other embodiments, different types of handles may or maynot be used depending on the needs and design of the secure tote 100. Inyet further embodiments, other types of interface elements can be used.

FIG. 2 is a block diagram of certain electronic features of the securetote of FIG. 1 and of ADM 200. The secure tote 100 includes memory 150,communications module 166, processor 168, and, as discussed above, inputdevice 130 and output device 140.

Processor 168, for example, a central processing unit (CPU), drivessoftware stored in the computing device's memory 150 or elsewhere. Sincethe secure tote 100 is portable and, in certain embodiments, powered bya battery, the processor 168 or other circuitry may be designed for lowpower operation in order to provide satisfactory runtime beforerequiring recharging or replacement of the battery.

Communications module 166 is configured to transmit, receive, andotherwise communicate information with network 180 and/or devices on thenetwork 180, such as ADM 200. For example, communications module 166communicates with ADM 200 when the secure tote 100 is docked with ADM200 through a connection between secure tote communications module 166and ADM communications module 266. The secure tote 100 can be incontinuous communication with network 180, or can connect to network 180or another device as necessary. Communication is achieved via acommunication layer that enables data transmissions. Examplecommunications modules 166 include serial communication interfaces suchas RS-232, Ethernet, Universal Serial Bus (USB), and wireless interfacessuch as RF, infrared, Bluetooth® and IEEE 802.11x. For example, thesecure tote 100 can be networked by connecting to a central data networkdevice via data cables when the secure tote 100 is docked. Inembodiments using communications module 266 configured for locationtracking, such as by using RF technology, an additional level ofsecurity is provided by allowing for the location of the secure tote 100to be tracked. Consequently, in such embodiments, if the secure tote 100leaves an authorized usage area, communications module 266 can transmitan appropriate alert, and secure tote output device 140 can likewisesignal an appropriate alert.

In certain embodiments, the secure tote 100 may also be “dumb,” i.e.,without on-board intelligence, and information about its contents may becontained within a barcode, for example, placed on the secure tote 100.In such embodiments, a receiving area of an apparatus, for example on orin ADM 200, may acquire the necessary information through scanning ofthe barcode on the secure tote 100 to enable ADM 200 to obtainsufficient information about the contents of the secure tote 100. Thereceiving area may be a drawer in ADM 200 having either an on-boardcomputer processor 268 or a connection 266 to one remote therefrom. Inyet other embodiments, the secure tote 100 can further reduce the amountof on-board intelligence, such as by suspending or even removingcommunication functionality. For example, the secure tote 100 can actindependently, limiting or removing the need for communication withother devices or networks, while at the same time maintaining the accesscontrol and usage logging functionality discussed below.

In another embodiment, the secure tote 100 may have limited on-boardintelligence. For example, the information storage device or the barcodelabel on the secure tote 100 may contain information about one or manymodular receptacles 110, such as a receptacle number (e.g., #1234567).This pre-programmed information would typically be entered when amodular receptacle 110 is filled. In this embodiment, a human-readablelabel (not a barcode label) or marking on the receptacle 110 itself withthe receptacle number may be used and the caregiver may, for recordingpurposes, manually enter the receptacle number into the computer havingthe pre-programmed information about the contents of the modularreceptacles 110 in the secure tote 100.

The secure tote 100 also features onboard memory 150. In the embodimentillustrated, the memory 150 includes ADM interface software 152, accesscontrol software 154, usage logging software 156, patient data 158,medication library 160, usage log 162, and access information 164.Onboard memory 150 can be either non-volatile storage (e.g., read-onlymemory, flash memory, magnetic media, etc.), volatile storage (e.g.,random-access memory), or both.

Access control software 154, which in combination with the processor 168can jointly be referred to as a controller, is responsible forcontrolling access to the secure tote 100. Access control software 154references access information 164 stored in memory 150 whenauthenticating a caregiver or other user attempting to use the securetote 100. Access control software 154 may authenticate users byreference to a password, keycard, or other authentication method knownto those of skill in the art. For example, access control software 154can require the input of the appropriate patient identification andcaregiver identification before unlocking a modular receptacle assignedto the caregiver and the patient containing medications for the patient.By providing verifiable access to only the appropriate medications for apatient (i.e., by opening only the correct modular receptacle), thesecure tote 100 reduces the risk that a caregiver will administer theincorrect medication to a patient.

Secure tote memory 150 includes ADM interface software 152 configured tofacilitate docking and communication with ADM 200 or other similarlyconfigured devices. ADM interface software 152 is configured tocommunicate with various types of ADMs, so as to facilitate informationtransfer between ADM 200 and the secure tote 100. Similarly, in certainembodiments, secure tote interface software 252 can be loaded into thememory 250 of ADM 200 to facilitate docking between the secure tote 100and the ADM 200.

Patient data 158 contains information concerning the contents of thesecure tote 100, such as the contents of each receptacle 110. Forexample, patient data 158 can include assignment information for eachreceptacle 110 of the secure tote 100, including, but not limited to: anassigned patient, including patient-related information; an assignedcaregiver authorized to fill the receptacle; an assigned caregiverauthorized to dispense medications from the receptacle to the patient;medications in the receptacle, including information on the type, dose,and expiration date; authorized locations for use; the time at which thesecure tote 100 was filled; and the time at which the secure totemedications 100 were dispensed.

Secure tote patient data 158 can be configured directly using a suitableinput device 130 and output device 140 for the secure tote 100. Forexample, a specific modular receptacle can be programmed with patient,caregiver, and medication information by scanning barcodes associatedwith the patient, caregiver, medication, and modular receptacle using abarcode reader input device 130. A successful assignment may beindicated by flashing green indicator light 140. Appropriate barcodesmay be available at or near the ADM, such as in a catalog. Individuallybarcoded medications can be scanned directly using the barcode reader140.

In another embodiment, patient data 158 can be configured and downloadedfrom an ADM 200 to which the secure tote 100 is docked, providing for anintegrated workflow between the secure tote 100 and ADM 200. Forexample, when a caregiver docks the secure tote 100 to ADM 200, asschematically illustrated in FIG. 2, the caregiver may assign patientsand medications to various modular receptacles 110 in the secure tote100 using ADM 200, and, thereafter, the assignment information and otherinformation may be downloaded as patient data 258 from ADM memory 250through ADM communications module 266 and secure tote communicationsmodule 166, and stored as patient data 158 in secure tote memory 150. Asanother example, pre-loaded modular receptacles 110 each containingassociated patient data in memory may be available at ADM 200, and, whenthe modular receptacles 110 are connected to the secure tote 100, theassociated patient data can be transferred from each modular receptacle110 to the secure tote 100.

Medication library 160 stores a wide variety of information related tomedications. For example, medication library 160 can include data fromthe Hearst Corporation's National Drug Data File, such as information onexpiration dates, lot numbers, NDC numbers, types of drug or medicalsupply dosage, sizes of packages, numbers of items in the packages, etc.Medication library 160 can also include other information related tomedications, such as the prescribing indicators (PI).

Usage logging software 156 can store transactional or other useinformation about the secure tote 100 in usage log 162. For example,each time a caregiver provides user input, the input is logged in usagelog 162. Each time a medication is transferred to the secure tote 100,selected, and/or dispensed, the filling, selection, and/or dispensing ofthe medication is likewise logged in usage log 162. Similarly, thepatient, medication, and caregiver assignments for the secure tote 100,such as for each modular receptacle 110, is recorded in usage log 162.Each time the secure tote 100 is docked, undocked, or otherwiseconnected to another device or network, the information is logged inusage log 162. For each and any transaction using the secure tote 100,usage log 162 records information, including time information, such asthe times at which the secure tote 100 has been docked, filled,dispensed, put into service, taken out of service, or otherwise used. Inthis manner, administrators can access a detailed usage log 162 for thesecure tote 100, such as for auditing purposes. Furthermore, byconfiguring the secure tote 100 to communicate with other devices (suchas ADM 200) capable of recording transaction data, a “closed-loop”tracking of medication is provided up until the medication isadministered to a patient.

Usage log 162 may be displayed locally on the secure tote 100 through asuitable output device 140 and with appropriate authorization using asuitable input device 130. Usage log 162 may be displayed remotely fromthe secure tote 100, when, for example, a caregiver or other authorizeduser interacts with a device having access to usage log 162, whetherthrough docking or over network 180. In certain embodiments, the accesscontrol software 154 also includes code for allowing access to the usagelog 162 by authorized users, who may authenticate access using apassword, keycard, or other authentication method known to those ofskill in the art. In certain embodiments, usage data is stored inreal-time (i.e., immediately), while in other embodiments usage data isstored following a delay.

In certain embodiments, transactional or other use information usuallystored in usage log 162 may instead be transmitted by usage loggingsoftware 156 to a central receiving station computer 320 for storage, asillustrated in FIG. 3. The information is transmitted via a networkconnection 180. In other embodiments, usage logging software 156 storesusage log information both locally, in usage log 162 of secure totememory 150, as well as remotely, in receiving station computer 320. Inyet further embodiments, usage logging software 156 can store usage log162 locally, and, upon docking with a suitable device or with network180, upload usage log 162 accordingly. Note that the physicalconfiguration of the secure tote 100 in FIG. 3 is different from that ofFIG. 1, illustrating that the physical configuration depicted in thefigures is exemplary only.

In certain embodiments, the secure tote 100 can also dock to orotherwise connect to a device at a patient bedside, such as a deviceincluding a bedside information gateway. The caregiver can then interactwith the bedside information gateway in order to access or configure thesecure tote 100 at the patient bedside, for example, to facilitatedispensing medications from the secure tote 100 to the patient or toreconfigure the secure tote 100 based on new information made availableto the caregiver when at the patient's bedside. Usage logging software156 can optionally upload stored usage log 162 to the bedside device inorder to update receiving station computer 320 with the latest usageinformation.

FIG. 4 is a flow diagram illustrating a process 400 for filling (orrefilling) medications in the secure tote 100 of FIG. 1. Recording byusage logging software 156 for various states is reflected in similarlynumbered prime (′) states, as discussed below.

The process begins by moving to state 401, wherein a user, such as acaregiver, docks a secure tote 100 to ADM 200. This transaction isrecorded by usage logging software 156 in state 401′. Upon docking thesecure tote 100 to ADM 200, the caregiver provides access information toADM 200 in state 402 for security purposes, so as to ensure authorizeduse of the secure tote 100. If the access information is verified indecision state 403, the process 400 continues to state 404. If, however,the access information is not verified, the process 400 jumps to the endstate.

In state 404, the caregiver selects a patient and associatedpatient-specific medications to assign to a modular receptacle 110 inthe secure tote 100. The caregiver in state 405 then selects the modularreceptacle 110 to which to assign the patient's medications. Thepatient, patient-specific medications, and authorization for thecaregiver are all then assigned to the selected modular receptacle 110in state 406. Usage logging software 156 in state 406′ appropriatelyrecords the assignment by recording the time at which the assignmentoccurred, the caregiver identification, the patient information, thepatient-specific medication information, including type and dose, andthe modular receptacle identification. In state 407, the assignedmodular receptacle is unlocked, and recorded accordingly in state 407′by recording information such as the unlocked receptacle'sidentification, the time, the caregiver identification, and the actionof unlocking to fill the modular receptacle with the patient-specificmedication. With the modular receptacle unlocked, the caregiver canproceed to load the patient-specific medications into the assignedmodular receptacle in state 408. After the medications are loaded, thecaregiver locks the modular receptacle in state 409, and usage loggingsoftware 156 records the time, caregiver identification,patient-specific medication information, the modular receptacleidentification, and the action of locking after a fill was completed, instate 409′. The caregiver decides in decision state 410 whether anyremaining patients need to be assigned to the secure tote 100; ifpatients do remain, the process 400 returns to state 404, but ifpatients do not remain, the process proceeds to state 411.

In state 411, with loading completed, the caregiver logs off of ADM 200.The secure tote 100 is then undocked from ADM 200 in state 412, andusage logging software 156 records the time, ADM identification, andaction of undocking accordingly in state 412′.

In certain embodiments, certain states of process 400 can change inorder. For example, in certain embodiments, states 408 and 409 cansucceed state 410, such that the caregiver can load all assigned modularreceptacles at the same time. Furthermore, in certain embodiments, othertypes of information can be logged by usage logging software 156.

FIG. 5 is a flow diagram illustrating a process 500 for dispensingmedications from the secure tote 100 of FIG. 1, such as at a patient'sbedside. As with FIG. 4, recording by usage logging software 156 forvarious states in process 500 is reflected in similarly numbered prime(′) states, as discussed below.

The process begins by moving to state 501 to conduct a bedsideidentification. In state 501, a user, such as a caregiver, scans apatient identification tag. For example, at the patient bedside, thecaregiver can detach wireless barcode reader 130 from the secure tote100 and use wireless barcode reader 130 to scan a patients′ barcodewristband containing that patient's identification information. The timeand patient identification is recorded by usage logging software 156 instate 501′. The caregiver then scans his/her own identificationinformation in state 502. For example, a caregiver can use wirelessbarcode reader 130 to scan the caregiver's badge, which can contain thecaregiver's identification information. The time and caregiveridentification is recorded by usage logging software 156 in state 502′.The process 500 then proceeds to state 503.

In situations featuring a bedside information gateway device at thepatient bedside, states 501 and 502 may be replaced by docking thesecure tote 100 to the bedside information gateway device andauthenticating the caregiver's access to the bedside information gatewaydevice, with relevant transactions being logged. The process 500 maythen proceed as described to state 503.

Secure tote access control software 154, with reference to accessinformation 164 stored in memory 150 of the secure tote 100, determinesin decision state 503 whether the patient-caregiver pairing identifiedin states 401 and 402 is assigned to a modular receptacle in the securetote 100. If such a pairing is not found (such as where the caregiverdoes not have authorized access to dispense medications to the patient,or if the patient is not assigned to a modular receptacle 110 in thesecure tote 100), the process 500 proceeds to an end state. If, however,an appropriate patient-caregiver pairing is found to be assigned to amodular receptacle 110 of the secure tote 100, the process 500 proceedsto state 504 wherein the assigned modular receptacle 110 is unlocked. Instate 504′, usage logging software 156 records the identification of theunlocked receptacle, the time at which it was unlocked, the authorizedpairing of the caregiver identification and patient identification forwhom it was unlocked, and the purpose for which it was unlocked, i.e.,so the caregiver could dispense the patient-specific medications in themodular receptacle to the patient. ADM interface software 152 canoptionally retrieve updated patient, caregiver, medication, or otherrelevant information at this step in order to ensure that the caregiverhas access to the latest information when administering medications tothe patient.

The caregiver administers the patient-specific medications from the openmodular receptacle to the patient in state 505. After administration,the caregiver locks the modular receptacle from which the medicationswere dispensed to the patient, in order to signal to the secure tote 100that the dispensing has been completed. In certain embodiments, thecaregiver can take additional action to confirm the completion ofdispensation to the patient of medications from the modular receptacle,such as by scanning a barcode on the modular receptacle, or by scanningeach barcode on a medication if the medications are individuallybarcoded. In state 506′, usage logging software 156 records theidentification of the locked receptacle, the time at which it waslocked, the authorized pairing of the caregiver identification andpatient identification by whom it was locked, and the purpose for whichit was locked, i.e., upon completion of dispensation by the caregiver ofpatient-specific medications to the patient.

The caregiver decides in decision state 507 whether any remainingpatients assigned to the secure tote 100 need to receive medicationstored in the secure tote 100. If patients do remain, the process 500returns to state 501 when the caregiver proceeds to the bedside of thenext patient. If patients do not remain, the process proceeds to an endstate.

FIG. 6 illustrates another embodiment of a secure tote 600 for securemedication transport and administration. This configuration is alsoexemplary only, such that other physical configurations may be employed.

In the embodiment illustrated in FIG. 6, the secure tote 600 comprises asecurable receptacle 110, a retractable strap 120, a display screen 140,and a communications interface 602. In certain embodiments, the securetote 600 can be a patient-specific secure tote 600 if it is configuredto contain medications for a single selected patient.

The receptacle 110 is configured to be moveable between a closedposition, as illustrated in FIG. 6, and an open position, as illustratedin FIG. 7. The receptacle 110 has a plurality of sidewalls that define astorage compartment, as well as a top 116 that is opened and closedabout a hinge. A latch assembly can be formed between top 116 and one ofthe sidewalls to keep top 116 in a closed position until an authorizedcaregiver gains access to the receptacle 110. The modular receptacle 110may be used to contain various items.

The secure tote 600 illustrated includes an LCD display screen 140 whichcan be used to display information such as, but not limited to, accessinformation, patient information and security information. Although anLCD display screen 140 is illustrated, other types of output devices canbe used.

The secure tote 600 also features a communications interface 602,represented by a USB female port. Although a USB port is illustrated,other types of communications interfaces can be used. Through the use ofa communications module 166 (illustrated in phantom), the communicationsmodule 602 is configured to be an interface for transmitting, receiving,and otherwise communicating information with network 180 and/or deviceson the network 180, such as the docking station 800 illustrated in FIG.8.

In certain embodiments, the features, configurations, and uses,including variations, of the secure tote 600 are the same as or similarto the features and configurations of the secure tote 100 discussedabove.

FIG. 8 illustrates a docking station 800 for the secure tote embodimentof FIG. 6. This configuration is also exemplary only, such that otherphysical configurations may be employed.

The docking station 800 features a communications module 804,represented by a USB male connector. The USB male connector isconfigured to connect to the USB female connector of the secure toteembodiment 600 illustrated in FIG. 6. Although a USB connector isillustrated, other types of communications interfaces can be used. Thecommunications module 804 of the docking station 800, using acommunications module 166 (not illustrated), is configured to be aninterface for transmitting, receiving, and otherwise communicatinginformation with network 180 and/or devices on the network 180, such asthe secure tote 600.

The docking station 800 includes indicator lights 140 to indicate astatus of the docking station 800. The docking station 800 can alsoinclude grooves 802 or other guiding mechanisms to facilitate preciselyfitting the secure tote 600 to dock with the docking station 800.

FIG. 9 illustrates a sample screenshot 900 of ADM interface softwaredisplaying a docked secure tote. The screen 900 includes a button 902for accessing information related to the docked secure tote. FIG. 10illustrates a sample screenshot 1000 of ADM interface softwaredisplaying an assignment of patient-specific medications to a securetote. The screen 1000 includes information on the patient 1004 as wellas the medications 1002 for the patient assigned to the secure tote.

Embodiments of the secure tote described herein can be integrated into afacility for use therein according to the different levels of automationavailable at the facility. For example, in a hospital without ADMautomation, use of the secure tote in a pharmacy can comprise (1)filling, via a traditional cart fill type process in the pharmacy, thesecure tote with medications for a specific patient, (2) delivering thesecure tote to the nurse docking station, and, after the secure tote hasbeen used to dispense medications to the patient, (3) returning thesecure tote, which may contain unused items, to the pharmacy. At thisfinal step, the secure tote may be swapped for another secure totecontaining medications for the patient, for the next scheduled deliveryof medications to the patient.

Use of the secure tote to dispense medications to a patient in ahospital without ADM automation can comprise (1) successfully logging onto a bedside verification system (“BVS”), (2) unlocking the secure tote,(3) dispensing the medications to the patient, and (4) locking thesecure tote when completed.

In certain embodiments, in a facility without ADM automation, the securetote can be used without interacting with any other devices, but mayinstead function as a stand-alone secure transport for medication, asdiscussed above.

In a hospital with either basic or advanced ADM automation (i.e.,automated filling of the secure tote may be available), similarprocesses may be used. For example, use of the secure tote in a pharmacymay comprise the additional step of (4) refilling the ADM responsiblefor filling the secure tote with patient-specific medication. Likewise,use of the secure tote to dispense medications may comprise theadditional step of (5) filling the secure tote using the ADM, ifavailable.

In certain embodiments, in a facility with basic ADM automation, thesecure tote may store information regarding what patient-specificmedications it contains and communicate this information to otherdevices on the network 180, as discussed above. In certain embodiments,in a facility with advanced ADM automation, the secure tote may furtherstore, communicate, and integrate user information, usage information,and access information, as discussed above.

Although the secure tote 100 has been described and illustrated inexamples relating to the transport of medications from an ADM to apatient's bedside, the secure tote 100 has applicability to a broadrange of other secure transport and administration uses. For example,the secure tote 100 can be used to transfer medications from a pharmacyto an ADM. The medications could be loaded at a pharmacy into the securetote 100 by a pharmacist or pharmacy technician and transported to anurse unit housing the ADM, while implementing the relevant access,logging, and communication features described above.

It should be appreciated from the foregoing description that whilecertain embodiments of the present disclosure are useful in the medicaldrug and supply field, other embodiments have applicability to a broadrange of industries apart from the medical industry, where similarinventory control and security measures are preferred. The presentdisclosure is not intended to be limited to the medical supply and drugindustry.

While certain aspects and embodiments of the invention have beendescribed, these have been presented by way of example only, and are notintended to limit the scope of the invention. Indeed, the novel methodsand systems described herein may be embodied in a variety of other formswithout departing from the spirit thereof. The accompanying claims andtheir equivalents are intended to cover such forms or modifications aswould fall within the scope and spirit of the invention.

1. A portable medication dispensing system comprising: a portablemedication tote, configured to be carried by a user, comprising at leastone securable compartment configured to hold medication; a controller,responsive to access information, configured to: assign a patient to theat least one securable compartment such that medications for the patientare authorized for placement into the at least one securablecompartment; selectively permit the user access to the medications forthe patient in the at least one securable compartment when the accessinformation indicates the user has access to the at least one securablecompartment; and restrict access to retrieval of the medications for thepatient in the at least one securable compartment when the accessinformation indicates the user does not have access to the at least onesecurable compartment; and an information output module configured to:output usage information regarding access to the at least one securablecompartment.
 2. The system of claim 1, further comprising acommunication module configured to transmit the usage information to aninformation storage device.
 3. The system of claim 1, further comprisinga communication module configured to communicate with an informationstorage device.
 4. The system of claim 1, further comprising aninformation storage device configured to store the usage information. 5.The system of claim 1, wherein the usage information comprises at leastone of a time value, a communication status, a user identification, apatient identification, an information storage device identification, amedication data, a current status, a usage history, or a configuration.6. The system of claim 1, wherein the information output module isfurther configured to provide information regarding the location of theportable medication tote.
 7. The system of claim 1, further comprisingan input device.
 8. The system of claim 7, wherein the input devicecomprises at least one of a barcode reader, a keyboard, a touch-screendisplay, a mouse, a microphone, a magnetic card reader, a biometricreader-sensor, a proximity reader, a radio frequency identificationreader, or a symbology reader.
 9. The system of claim 1, furthercomprising an output device.
 10. The system of claim 9, wherein theoutput device comprises at least one of an audio speaker, a lightemitting diode, a cathode ray tube display, a vacuum fluorescentdisplay, a light emitting diode display, a plasma display panel, aliquid crystal display, an organic light emitting diode, or asurface-conduction electron-emitter display.
 11. The system of claim 9,wherein the output device is configured to indicate a status of at leastone of the controller and the information output module.
 12. The systemof claim 1, wherein the at least one securable compartment comprises: areceptacle having a top adapted for movement between an open positionand a closed position; and a latch, in association with the top, adaptedto be actuated by the controller; wherein selectively permitting theuser access to the medications for the patient in the at least onesecurable compartment comprises the controller opening the top byactuating the latch when the access information indicates the user hasaccess to the at least one securable compartment.
 13. A method, forpatient-specific medication dispensing, comprising: assigning a patientto at least one securable compartment in a portable medication tote, thetote configured to be carried by a user, the at least one securablecompartment configured to store medications for the patient; selectivelypermitting the user access to store the medications for the patient inthe at least one securable compartment when access information indicatesthe user has storage access to the at least one securable compartment;comparing a bedside identification of the user and a bedsideidentification of the patient to the access information to determinewhether the user has access to dispense to the patient the medicationsfor the patient in the at least one securable compartment; selectivelypermitting the user access to dispense to the patient the medicationsfor the patient in the at least one securable compartment using thedetermination; and outputting usage information regarding the useraccess to at least one of the assignment, access, and the determinationmade regarding the at least one securable compartment.
 14. The method ofclaim 13, further comprising restricting access to the user to store themedications for the patient in the at least one securable compartmentwhen the access information indicates the user does not have storageaccess to the at least one securable compartment.
 15. The method ofclaim 13, further comprising restricting access to the user to dispensethe medications for the patient in the at least one securablecompartment when the access information indicates the user does not haveaccess to dispense the medications in the at least one securablecompartment to the patient.
 16. The method of claim 13, furthercomprising recording the output usage information in an informationstorage device.
 17. The method of claim 13, further comprising dockingthe portable medication tote to a medication storage device storing themedications for the patient before assigning the patient to the at leastone securable compartment.
 18. The method of claim 13, wherein theidentification information comprises a barcode, magnetic strip, or radiofrequency identification.
 19. A computer-readable medium havingcomputer-executable instructions for causing a processor to executeinstructions to control a portable medication dispensing system byperforming steps comprising: assigning a patient to at least onesecurable compartment in a portable medication tote, the tote configuredto be carried by a user, the at least one securable compartmentconfigured to store medications for the patient; selectively permittingthe user access to store the medications for the patient in the at leastone securable compartment when access information indicates the user hasstorage access to the at least one securable compartment; comparing abedside identification of the user and a bedside identification of thepatient to the access information to determine whether the user hasaccess to dispense to the patient the medications for the patient in theat least one securable compartment; selectively permitting the useraccess to dispense to the patient the medications for the patient in theat least one securable compartment using the determination; andoutputting usage information regarding the user access to theassignment, access, and/or determination made regarding the at least onesecurable compartment.
 20. The computer-readable medium of claim 19,having further computer-executable instructions for performing the stepof recording the output usage information in an information storagedevice.
 21. A portable dispensing system comprising: a portable itemtote, configured to be carried by a user, comprising at least onesecurable compartment configured to hold items; a controller, responsiveto access information, configured to: assign an assignee to the at leastone securable compartment such that items for the assignee areauthorized for placement into the at least one securable compartment;selectively permit the user access to the items for the assignee in theat least one securable compartment when the access information indicatesthe user has access to the at least one securable compartment; andrestrict access to retrieval of the items for the assignee in the atleast one securable compartment when the access information indicatesthe user does not have access to the at least one securable compartment;and an information output module configured to: output usage informationregarding access to the at least one securable compartment.